Access revocation

Abstract

Systems, methods and apparatuses for revoking access to one or more applications for one or more individuals or users are provided. In some examples, revocation settings may be received from different business divisions or enterprises or business groups within an entity and may be compiled to form a standardized set of revocation settings that may be applied across the entity. Accordingly, upon receiving an item that may be associated with access and may include one or more applications to which access may be revoked and/or one or more users from which access may be revoked, the system may apply the standardized revocation settings to determine whether access should be revoked. If it is determined that access should be revoked, the system may revoke access to the one or more applications for the one or more users.

What is claimed is: 
     
       1. An apparatus, comprising:
 at least one processor; and 
 a memory storing computer-readable instructions that, when executed by the at least one processor, cause the apparatus to:
 receive first revocation settings from a first enterprise division within a business entity; 
 receive second revocation settings from a second enterprise within the business entity; 
 compile the first revocation settings and the second revocation settings to generate compiled revocation settings; 
 receive a first item associated with a revocation of access for a user within the business entity, the first item including identification of one or more applications for which revocation of access is being evaluated and identification of one or more users for which revocation of access is being evaluated; 
 analyze the first item based on the compiled revocation settings, the analyzing further including instructions that, when executed, cause the apparatus to:
 determine, based on the compiled revocation settings, whether the first item is associated with providing access; 
 determine, based on the compiled revocation settings, whether the first item is actionable by the access revocation system; and 
 determine, based on the compiled revocation settings, whether the first item is mapped to a confirmed location; and 
 responsive to determining that the first item is associated with providing access, that the first item is actionable and that the first item is mapped to a confirmed location, revoke access to the one or more applications identified in the first item for the one or more users identified in the first item. 
 
 
 
     
     
       2. The apparatus of  claim 1 , further including instructions that, when executed, cause the apparatus to:
 record an outcome of the steps of determining whether the first item is associated with providing access, determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
 
     
     
       3. The apparatus of  claim 2 , further including instructions that, when executed, cause the apparatus to:
 store the recorded outcomes for further analysis. 
 
     
     
       4. The apparatus of  claim 2 , further including instructions that, when executed, cause the apparatus to:
 display the recorded outcomes on a user interface tracking the analysis of the first item. 
 
     
     
       5. The apparatus of  claim 1 , further including instructions that, when executed, cause the apparatus to:
 responsive to determining that the first item is not associated with providing access, remove the first item from further analysis including the steps of determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
 
     
     
       6. The apparatus of  claim 5 , wherein removing the first item from further analysis includes transferring the first item for further processing. 
     
     
       7. The apparatus of  claim 1 , wherein the first revocation settings are best practices of the first enterprise and the second revocation settings are best practices of the second enterprise. 
     
     
       8. A method, comprising:
 receiving, by an access revocation system having at least one processor, first revocation settings from a first enterprise within a business entity; 
 receiving, by the access revocation system, second revocation settings from a second enterprise within the business entity; 
 compiling the first revocation settings and the second revocation settings to generate compiled revocation settings; 
 receiving, by the access revocation system, a first item associated with a revocation of access for a user within the business entity, the first item including identification of one or more applications for which revocation of access is being evaluated and identification of one or more users for which revocation of access is being evaluated; 
 analyzing the first item based on the compiled revocation settings, the analyzing including:
 determining, based on the compiled revocation settings, whether the first item is associated with providing access; 
 determining, based on the compiled revocation settings, whether the first item is actionable by the access revocation system; and 
 determining, based on the compiled revocation settings, whether the first item is mapped to a confirmed location; and 
 responsive to determining that the first item is associated with providing access, that the first item is actionable and that the first item is mapped to a confirmed location, revoking access to the one or more applications identified in the first item for the one or more users identified in the first item. 
 
 
     
     
       9. The method of  claim 8 , further including, recording an outcome of the steps of determining whether the first item is associated with providing access, determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
     
     
       10. The method of  claim 9 , further including storing the recorded outcomes for further analysis. 
     
     
       11. The method of  claim 9 , displaying the recorded outcomes on a user interface tracking the analysis of the first item. 
     
     
       12. The method of  claim 8 , further including, responsive to determining that the first item is not associated with providing access, removing the first item from further analysis including the steps of determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
     
     
       13. The method of  claim 12 , wherein removing the first item from further analysis includes transferring the first item for further processing. 
     
     
       14. The method of  claim 8 , wherein the first revocation settings are best practices of the first enterprise and the second revocation settings are best practices of the second enterprise. 
     
     
       15. One or more non-transitory computer-readable media having computer-executable instructions stored thereon that, when executed, cause at least one computing device to:
 receive first revocation settings from a first enterprise within a business entity; 
 receive second revocation settings from a second enterprise within the business entity; 
 compile the first revocation settings and the second revocation settings to generate compiled revocation settings; 
 receive a first item associated with a revocation of access for a user within the business entity, the first item including identification of one or more applications for which revocation of access is being evaluated and identification of one or more users for which revocation of access is being evaluated; 
 analyze the first item based on the compiled revocation settings, the analyzing further including instructions that, when executed, cause the apparatus to:
 determine, based on the compiled revocation settings, whether the first item is associated with providing access; 
 determine, based on the compiled revocation settings, whether the first item is actionable by the access revocation system; and 
 determine, based on the compiled revocation settings, whether the first item is mapped to a confirmed location; and 
 responsive to determining that the first item is associated with providing access, that the first item is actionable and that the first item is mapped to a confirmed location, revoke access to the one or more applications identified in the first item for the one or more users identified in the first item. 
 
 
     
     
       16. The one or more non-transitory computer-readable media of  claim 15 , further including instructions that, when executed, cause the at least one computing device to:
 record an outcome of the steps of determining whether the first item is associated with providing access, determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
 
     
     
       17. The one or more non-transitory computer-readable media of  claim 16 , further including instructions that, when executed, cause the at least one computing device to:
 display the recorded outcomes on a user interface tracking the analysis of the first item. 
 
     
     
       18. The one or more non-transitory computer-readable media of  claim 15 , further including instructions that, when executed, cause the at least one computing device to:
 responsive to determining that the first item is not associated with providing access, remove the first item from further analysis including the steps of determining whether the first item is actionable and determining whether the first item is mapped to a confirmed location. 
 
     
     
       19. The one or more non-transitory computer-readable media of  claim 18 , wherein removing the first item from further analysis includes transferring the first item for further processing. 
     
     
       20. The one or more non-transitory computer-readable media of  claim 15 , wherein the first revocation settings are best practices of the first enterprise and the second revocation settings are best practices of the second enterprise.